The Authorization header comes from the third-party applications you approve. Without it, those apps cannot connect to your site.